Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-12	CVE-2021-26363	Unspecified vulnerability in AMD products A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure. local low complexity amd	4.4
2022-05-12	CVE-2021-26368	Insufficient Verification of Data Authenticity vulnerability in AMD products Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service. local low complexity amd CWE-345	4.4
2022-05-12	CVE-2021-26351	Improper Input Validation vulnerability in AMD products Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service. local low complexity amd CWE-20	5.5
2022-05-12	CVE-2021-26361	Unspecified vulnerability in AMD products A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure. local low complexity amd	5.5
2022-05-11	CVE-2021-26339	Unspecified vulnerability in AMD products A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. local low complexity amd	5.5
2022-05-11	CVE-2021-26347	Improper Validation of Specified Quantity in Input vulnerability in AMD products Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. local high complexity amd CWE-1284	4.7
2022-05-11	CVE-2021-26348	Unspecified vulnerability in AMD products Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity. local low complexity amd	5.5
2022-05-11	CVE-2021-26349	Unspecified vulnerability in AMD products Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). local low complexity amd	5.5
2022-05-11	CVE-2021-26350	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in AMD products A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service. local high complexity amd CWE-367	4.7
2022-05-11	CVE-2021-26364	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in AMD products Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service. local low complexity amd CWE-119	5.5